Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211301.roa
File: AS211301.roa (raw, json)
Hash identifier: WB2v2QQtjCdkqImHKQyc7/GpGG1lJhv8Ccl6E+33txA=
Subject key identifier: 7D:F6:6C:76:7B:99:4F:2F:19:F8:51:BB:14:D4:3D:40:2D:0E:44:12
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0626C52492DCE15284684751D5A4FC4F5046C72D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211301.roa
Signing time: Mon 10 Aug 2026 12:49:21 +0000
ROA not before: Mon 10 Aug 2026 12:44:21 +0000
ROA not after: Mon 09 Aug 2027 12:49:21 +0000
asID: 211301
IP address blocks: 179.61.138.0/24 maxlen: 24
179.61.221.0/24 maxlen: 24
179.61.251.0/24 maxlen: 24
181.214.99.0/24 maxlen: 24
181.214.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:26:c5:24:92:dc:e1:52:84:68:47:51:d5:a4:fc:4f:50:46:c7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 12:44:21 2026 GMT
Not After : Aug 9 12:49:21 2027 GMT
Subject: CN=7DF66C767B994F2F19F851BB14D43D402D0E4412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:8a:2f:95:52:83:5f:39:eb:06:4a:0b:8a:
0b:78:58:dc:1d:89:1d:54:a9:8d:da:a9:24:c1:99:
49:fb:4a:4b:ea:56:cb:54:34:6c:5e:81:cc:ab:ae:
36:b6:bc:fe:bc:9a:b8:06:30:ae:bc:27:46:03:97:
a8:8c:25:d6:40:95:c0:2c:5b:ab:97:37:24:d6:5e:
69:02:5f:8f:a2:32:5c:79:1e:d2:ab:c5:f4:ac:ee:
55:df:57:c0:ac:c6:22:ad:0e:e0:73:66:d8:e1:c7:
1e:51:08:97:45:33:63:61:56:0f:30:07:c9:20:be:
f3:00:9b:dc:38:a7:91:33:bf:e6:51:c5:dc:9b:5c:
51:9f:7e:81:be:63:c2:65:1a:b2:18:ba:ba:54:6c:
e3:11:c4:b1:1d:db:3e:5d:a4:77:ea:71:3c:9a:87:
f5:44:dd:ce:ef:45:0b:b4:96:77:76:13:2c:c7:17:
1c:69:1f:65:78:c0:ea:81:36:70:2e:81:16:86:13:
76:ee:71:e9:f1:66:2a:b4:97:38:14:0c:7b:14:6b:
a8:52:3e:b8:2a:44:a7:e3:90:24:56:81:43:7a:d5:
72:5c:70:4e:fd:fc:96:4a:09:a9:95:87:dd:cd:5d:
a6:20:d5:52:df:cf:75:f4:c4:cd:2f:6f:05:09:42:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:6C:76:7B:99:4F:2F:19:F8:51:BB:14:D4:3D:40:2D:0E:44:12
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.138.0/24
179.61.221.0/24
179.61.251.0/24
181.214.99.0/24
181.214.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:49:cf:38:fe:c6:b1:06:af:a0:27:fe:2e:45:d7:58:63:b6:
82:0a:ae:43:c7:78:4d:bd:3f:f0:03:4f:cc:33:dc:9e:13:37:
53:94:f3:16:bc:b6:c2:ef:48:fe:e4:7c:fb:61:b5:e9:29:18:
fc:01:2c:54:bb:09:dc:f7:05:0a:b6:56:23:9f:66:97:4c:4c:
83:cd:c8:8a:71:07:2e:0d:33:8b:33:7b:78:4e:39:d6:df:29:
71:47:64:d0:a0:94:38:4b:23:75:29:20:9b:c7:b4:01:4c:35:
00:80:f7:60:15:d8:3e:07:d1:87:a3:08:84:a0:1d:66:15:32:
7d:3e:6f:7f:4d:99:d5:fd:30:2a:ef:4a:f5:53:da:6f:6d:5b:
a6:0a:44:ba:b1:dd:1d:e2:0e:1d:18:9d:16:41:6c:d8:16:e4:
d0:28:ae:06:9c:16:1d:a9:79:68:03:09:6f:f1:8f:79:28:5f:
1c:b7:6b:64:95:bd:6e:68:55:78:48:82:2a:18:60:13:5d:cd:
b3:71:e4:52:5e:bb:ba:f4:45:4b:0f:65:dc:20:a2:44:30:c7:
48:a0:f0:99:94:99:81:13:0c:15:24:0e:93:f9:ce:d6:f8:3b:
95:e1:c9:7e:e2:58:4c:cb:1c:cf:ac:1d:2f:3b:85:7b:ff:a9:
1a:15:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:54:58 2026 by rpki-client